General Data Protection Regulation

1. Who is responsible and how to contact them?

The controller of this site is QR Code Generator PRO S.L with address at Shop No 24, B Wing, Spine City Mall, PCNTDA, Moshi Pradhikaran, Pune - 411047, India.

You can contact us via email at support@rapidqr.co.

2. What data is collected?

We automatically collect data through the cookies that we load on your device, including analytics. We also collect the IP from which the connection is made, the type of device used and its characteristics, the version of the operating system, the type of browser, the language, the date, the country, the time of the request, the URL from which you come from, the URL to which you go or the mobile network used, among others.

Voluntarily, the user provides us with some information such as their name and surname, email or bank information to be able to contact us, sign up for the service or purchase a subscription.

3. What is the collected data used for?

The Service will use the data collected, among other things, to administer and update the service, respond to your requests, send you our newsletter and promotional offers by email, manage your registration on the platform, manage and provide the services related to your subscription, process the payments you make and issue the corresponding invoices, maintain the security of the Service, investigate illicit activities, enforce our terms and conditions and help the state security forces and bodies in the framework of their eventual investigations.

4. How long are they kept?

The disaggregated data will be kept without a deletion period.

Customer data will be kept for the minimum necessary, and may be kept until:

• 5 years, according to art. 1964 of the Civil Code (personal actions without special term).
• 6 years, according to art. 30 of the Commercial Code (accounting books or invoice, for example).

User data will be kept for a maximum period of 12 months in order to attend to their requests.

User data uploaded by the Service to pages and profiles on social networks will be kept from the moment the user offers their consent until they withdraw it.

5. What are your rights as a user?

• Right of access: The affected party shall have the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed.
• Right of rectification: The affected party shall have the right to obtain, without undue delay, from the data controller the rectification of personal data that is inaccurate and that affects him directly. Likewise, the interested party will have the right to complete incomplete personal data, including by means of an additional declaration.
• Right of deletion: It is the right of the affected party to obtain, without undue delay, from the data controller the deletion of the personal data that concerns him.
• Right to limit data processing: Consists in obtaining the limitation of the processing of your data by the person in charge, although its exercise has two aspects: 1) When you challenge the accuracy of your personal data, during a period that allows the person in charge to verify it and 2) When you have objected to the processing of your personal data that the person in charge carries out based on legitimate interest or a mission of public interest, while the person in charge verifies whether these reasons prevail over yours.
• Right to data portability: It is the right of the affected party to receive the personal data that concerns him, that he has provided to a data controller, in a structured format, of common use and mechanical reading, and to transmit them to another controller without being prevented by the controller to whom they were provided.

In this sense, the interested party will have the right to have personal data transmitted directly from controller to controller when technically possible.

6. How can you exercise your rights?

You can exercise your personal data rights at any time by sending an email to: support@rapidqr.co or the postal address: Shop No 24, B Wing, Spine City Mall, PCNTDA, Moshi Pradhikaran, Pune - 411047, India. In both cases, you must identify yourself with your name and surname, as well as a copy of your ID or national ID, if necessary.

In addition, if you consider that there is a problem with the way QRFY is handling your data, you can direct your claims to the data protection authority that corresponds, being the Spanish Agency for Data Protection the one indicated in the case of Spain.

7. Are security measures adopted?

The Service takes all necessary technical and organizational measures to protect the security and integrity of personal and non-personal information collected. Both against unauthorized access and accidental alteration, loss, or destruction.

In any case, the Service cannot guarantee the absolute security of the information collected, so you must collaborate and use common sense at all times regarding shared information.

You understand and acknowledge that, even after deletion, Personal and Non-Personal Information may remain viewable in cache or if copied or stored by other users.

8. Are there transfers of personal data or international transfers?

We do not transfer data or international transfers. However, there are third parties that manage part of the Service that we require to comply with our Privacy Policy insofar as it is applicable to them and that they have their own. These third parties are service providers that perform functions on our behalf, such as web hosting, analytics monitoring, or web development.

Also, if we believe that it is reasonably necessary to satisfy any law, legal process or legitimate interest. In any case, we will only provide the strictly required information.